Information Security Auditor

About the role

Cognisys is seeking an experienced Information Security Auditor to join its fast‑growing GRC practice. The role is remote (based in South Africa) but requires working US hours (3 pm – 11 pm). You will deliver high‑quality audit engagements for clients across multiple industries and security frameworks.

Key responsibilities

• Lead and support the delivery of audit engagements for a diverse client base.
• Plan, conduct and document audits against recognised management‑system and security frameworks.
• Evaluate the design and effectiveness of controls and produce clear, actionable findings.
• Assist organisations in preparing for certification and external assurance.
• Collaborate with consultants, project managers and client stakeholders to ensure audit activities are thorough and objective.
• Contribute to continuous improvement of audit methodologies, tools and approaches.

Required profile

• Strong foundational knowledge of audit principles and security/management‑system frameworks.
• Practical experience delivering security audits in client‑facing environments.
• Detail‑oriented, able to plan and execute audits independently.
• Excellent written communication to produce clear audit reports.

Required skills

• Familiarity with audit and GRC tooling.
• Knowledge of security frameworks and standards (e.g., ISO 27001, NIST, SOC 2).

What we offer

• Competitive salary of R450 000 – R650 000 per year plus a 15 % allowance for non‑standard working hours.
• Fully remote work arrangement.
• Opportunity to work with leading global clients across more than 30 countries.
• Professional growth within a technology‑driven GRC practice.